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OUTLINE OF ACTIONS TO INITIATE REGULATORY CHANGES FOR AGENCY ij 

IMPLEMENTATION OF NATIONAL SECURITY DECISION DIRECTIVE 04 (NSDD-84) ij 

1 

THE FOLLOWING OUTLINE IS STRUCTURED FOR EACH AGENCY OF THE EXECUTIVE BRANCH THAT EMPLOYS PERSONS WHO REQUIRE ACCESS TO CLASSIFIED INFORMATION it) 
INCLUDE, WHENEVER REQUIRED BY THE POSITION, ACCESS TO SENSITIVE COMPARTMENTED INFORMATION. (SCI) . AGENCIES THAT DO NOT HAVE ORIGINAL CLASS I F I CA-f 
TION AUTHORITY OR DO NOT EMPLOY PERSONS WITH ACCESS TO SCI SHOULD DISREGARD INAPPLICABLE SECTIONS. 

I 


M AJOR R EQUIREMENTS OF NSDD-84 

I. SECURITY REGULATIONS 

A. Requirement to sign nondisclosure 
agreement form(s) for access to 
classified information 


SAMPLE LANGUAGE OR MECHANISM TO IMPLEMENT 


Any person whose position requires access to classified information 

must execute SF [§_ } (standardized form being developed by the 

Director, Information Security Oversight Office, ISOO). 


j 


[Optional provision that an agency head may choose to require of all persons 

who have access to classified information: Any person whose position requi res access 

to classified information must also execute SF (#j (standardi zed 

form being developed by the Director, ISOO, as a supplement to the 
standard form noted above, which adds a prepublication review requi reinent)]. 

B. Requirement to sign nondisclosure Any person whose position requires access to Sensitive Compartmented 

agreement form for access to SCI Information (SCI) must execute SF^ [£l (standardized form being 

developed by the Director, ISOO, wifi include a provision for prepublication 
review to assure deletion of SCI and other classified information). 
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MAJOR REQUIREMENTS O F NS DD-84 


SAMPLE LANGUAG E OR MECHANISM TO IMP L EMENT 


1. Establish a Prepublication Implementing regulations should describe the composition of a prepublication 

Review Authority review authority (individual or board). 

2. Establish prepublication review The regulations should include: 
procedures 

(a) procedures for submitting materials for review; 

(b) processing guidelines, including time frames 
(substantive replies will be required within 
30 working days); 

(c) procedures for referrals to other agencies with 
subject matter authority or interest; and 

(d) provisions for an optional administrative appeal process. 


C. Media contacts The relevant agency regulation should establish procedures to govern 

contacts between media representati ves and agency personnel with access 
to classified information, in order to minimize the opportunity for the 
negligent or deliberate unauthorized disclosure of classified information. 
The specific regulatory means are within an agency head's discretion. - 
Examples might include such procedures as clearing media contacts through 
a designated office or individual; responding to media inquiries only 
through a designated office or individual; or requiring the presence of more 
than one person during briefings or interviews. 
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MAJOR REQUIREMENTS OF NSDD-84 


SAMPLE LANGUAGE OR MECHANISM TO IMPLEMENT 


D. Procedures for reporting and 
investigating unauthorized 
disclosures 


The regulations should establish 
suspected or actual unauthorized 
to include: 


internal procedures for responding to 
disclosures of classified information. 


(a) Responsibilities and procedures for reporting unauthorized 
disclosures; 

(b) procedures for conducting preliminary investigations; 

(c) procedures for reporting unauthorized disclosures to the 
Department of Justice and the ISOO, and; 

(d) procedures to conduct polygraph examinations. 

EXAMPLE: The ( ) may require any employee to 

agency head _ . 

submit to a polygraph examination, when appropriate, in the 
course of investigations of unauthorized disclosures of 
classified information. The polygraph examination will be 
limited to the ci rcumstances of the unauthorized disclosure, 
and its results will not be relied upon to the exclusion of 
other information obtained during the investigation. Failure 
to cooperate with a polygraph examination will subject an 
employee to administrative sanction. 
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MA JOR REQUIREMENTS OF NSDD-84 
II. AGENCY STANDARDS OF CONDUCT: 
Sanctions and penalties 


SAMPLE LANGUAGE OR MECHANISM TO IMPLEMENT 


The regulation should include disciplinary actions or penalties 
that may be imposed upon agency personnel who knowingly, willfully, 
or negligently disclose classified information to unauthorized 
persons, or upon personnel who refuse to cooperate with an investigation 
of an unauthorized disclosure, including a polygraph examination. 
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